Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/BfNexY5OqoQ7WOolPlzeDpCCs5M.roa
File: BfNexY5OqoQ7WOolPlzeDpCCs5M.roa (raw, json)
Hash identifier: rSm9EPZuoDpFIDuTgtzeM5a6uFOK9MrJk+o4deyRBsw=
Subject key identifier: 05:F3:5E:C5:8E:4E:AA:84:3B:58:EA:25:3E:5C:DE:0E:90:82:B3:93
Certificate issuer: /CN=3fafd07dc086dd7feec69e64e094dee5f49cea7d
Certificate serial: 01941F8C50BD8FDFE81B41C7CDF8A819A915
Authority key identifier: 3F:AF:D0:7D:C0:86:DD:7F:EE:C6:9E:64:E0:94:DE:E5:F4:9C:EA:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6_QfcCG3X_uxp5k4JTe5fSc6n0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/BfNexY5OqoQ7WOolPlzeDpCCs5M.roa
Signing time: Wed 01 Jan 2025 01:47:56 +0000
ROA not before: Wed 01 Jan 2025 01:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201814
IP address blocks: 193.35.110.0/24 maxlen: 24
195.128.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:50:bd:8f:df:e8:1b:41:c7:cd:f8:a8:19:a9:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fafd07dc086dd7feec69e64e094dee5f49cea7d
Validity
Not Before: Jan 1 01:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05f35ec58e4eaa843b58ea253e5cde0e9082b393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b3:0e:18:2b:bc:13:9f:ba:e0:6b:11:58:9a:
20:22:23:4a:33:63:4a:6b:86:25:23:c5:58:9f:2d:
d7:bd:42:81:6b:00:ea:15:bd:57:54:c6:74:c6:9f:
19:e6:16:da:35:e3:e3:81:17:dc:79:e7:0b:05:4b:
6a:26:eb:04:fd:39:5f:4a:74:8d:04:52:c4:9a:c5:
5a:a7:c6:60:23:f9:02:89:d2:c0:92:81:08:24:9b:
6c:7a:1d:e5:22:47:36:d2:ba:cc:90:9a:a7:55:5c:
d8:13:3c:e1:bd:7b:53:2d:93:32:b6:90:47:0f:f2:
48:7b:b6:f9:93:37:c0:79:84:c0:fa:29:a6:55:c8:
87:da:62:cf:d1:6c:67:0f:25:68:5b:0b:53:62:0c:
53:e8:d6:54:65:ed:0d:59:26:24:8b:2c:62:d0:92:
ef:5f:6d:d0:b9:17:c5:c5:d0:a9:1d:67:ea:96:01:
6e:47:44:6d:50:fe:44:96:2c:5c:e6:e4:02:df:a2:
d5:4d:b0:bf:0b:ab:73:82:33:03:d8:cb:74:1e:02:
15:c2:a2:61:9e:49:84:a1:e3:51:d6:85:22:b8:5e:
d4:60:52:c8:40:25:08:ab:d0:8b:ec:72:19:7e:c3:
ca:e2:98:f6:36:b3:fe:0d:91:75:38:98:4d:ef:b2:
6c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F3:5E:C5:8E:4E:AA:84:3B:58:EA:25:3E:5C:DE:0E:90:82:B3:93
X509v3 Authority Key Identifier:
keyid:3F:AF:D0:7D:C0:86:DD:7F:EE:C6:9E:64:E0:94:DE:E5:F4:9C:EA:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6_QfcCG3X_uxp5k4JTe5fSc6n0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/BfNexY5OqoQ7WOolPlzeDpCCs5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/P6_QfcCG3X_uxp5k4JTe5fSc6n0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.110.0/24
195.128.154.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:e0:3f:cf:b2:f4:c0:61:29:db:64:bb:e8:68:b1:4d:33:f0:
1b:a3:9a:9e:f0:15:aa:55:a8:4d:d5:8f:f0:3b:73:a7:60:af:
06:3b:75:c6:f3:e6:93:e5:7c:93:36:78:e5:d8:40:72:fe:88:
cd:70:4f:4c:4e:5c:a3:a1:3a:f4:30:98:66:23:ff:2a:b2:a3:
67:e5:f2:8b:a4:e3:98:56:49:1d:76:7d:a6:64:5c:b3:76:f6:
e0:12:4a:a7:1a:35:82:d9:b8:b6:c5:dd:7a:23:56:5a:2c:86:
14:17:ba:55:b1:89:a4:e5:d7:9a:e8:24:99:76:3b:e0:2c:15:
6b:74:34:f8:34:7b:35:88:d6:26:69:7b:59:80:ae:c4:92:44:
97:a6:14:cb:89:d4:41:f5:08:a1:57:6f:fb:7a:dd:41:0f:85:
b2:da:c4:7b:32:b2:ef:1f:d7:fe:51:32:64:8f:2f:ce:a7:da:
8f:9e:59:0d:11:de:7f:5c:bd:84:59:1a:21:a6:8e:ee:12:2e:
22:aa:a1:9f:e7:cd:57:83:4a:e7:43:73:ae:91:5e:83:91:d7:
45:6e:bb:b6:45:ac:41:6f:ae:7e:e8:15:ee:55:ec:8e:24:53:
42:67:62:ff:4a:01:c8:8c:bc:7d:4a:9b:60:06:ca:e4:0d:5b:
4f:37:8f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:12:42 2025 by rpki-client